Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/B3F59B94736111F09ADEE8EBDAE4EC9C.roa
File: B3F59B94736111F09ADEE8EBDAE4EC9C.roa (raw, json)
Hash identifier: eR4Qxwb+mI8nglfUGqQ17cmvFFHo1KyyQ+vFkEJNLgU=
Subject key identifier: 2A:5B:EF:44:10:0E:37:9A:FF:EA:16:DA:C4:D4:F7:36:B2:42:99:AB
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 0190C7
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/B3F59B94736111F09ADEE8EBDAE4EC9C.roa
Signing time: Thu 07 Aug 2025 07:39:52 +0000
ROA not before: Thu 07 Aug 2025 07:39:47 +0000
ROA not after: Wed 10 Sep 2025 07:39:47 +0000
asID: 203020
IP address blocks: 154.217.0.0/24 maxlen: 24
154.217.1.0/24 maxlen: 24
154.217.2.0/24 maxlen: 24
154.217.3.0/24 maxlen: 24
154.217.4.0/24 maxlen: 24
154.217.96.0/19 maxlen: 24
154.217.160.0/22 maxlen: 24
154.217.164.0/22 maxlen: 24
154.217.168.0/21 maxlen: 24
154.217.178.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Mon 25 Aug 2025 00:06:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 102599 (0x190c7)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Aug 7 07:39:47 2025 GMT
Not After : Sep 10 07:39:47 2025 GMT
Subject: CN=68945848-f974
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:b1:74:46:49:87:6b:f4:ae:3d:bf:98:da:46:
a6:74:6e:5f:8f:4a:02:63:59:d4:9b:46:59:0d:2b:
f5:f6:f6:7f:d6:df:77:87:3b:ec:cc:cf:4d:1a:00:
c3:c7:ab:53:05:f0:95:aa:3d:63:c3:a6:7f:63:3e:
55:6f:70:c8:9a:d1:a3:58:f0:bf:c1:5e:1a:ee:20:
82:84:d7:62:3c:27:cb:97:28:cd:3e:bd:a1:28:36:
00:ae:2f:f5:1c:42:8f:36:76:ac:ec:5d:47:c9:fb:
20:53:e9:98:5f:f8:d9:8c:87:29:ad:5a:64:42:23:
b6:b9:d8:c5:d2:9e:5a:5b:68:a1:68:31:a3:b7:35:
58:e1:f0:56:da:72:44:7f:9f:36:a2:4f:36:16:6f:
95:d4:e7:c5:a9:35:c8:a6:ae:98:ce:a1:83:59:60:
34:98:19:e0:b7:3c:0b:bf:e9:e6:68:ae:4d:79:53:
15:84:24:1f:57:7e:ff:c0:85:62:6a:b1:34:52:b0:
b4:ce:a9:eb:af:2a:0e:a0:c8:12:21:4a:f0:49:82:
33:ac:48:d1:4e:ba:77:7c:09:c8:72:ae:54:97:2a:
a3:85:28:51:bc:41:ed:40:60:c3:6f:16:fc:d1:a2:
04:97:29:b7:81:e3:03:e3:53:90:a4:f6:3d:a7:35:
08:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2A:5B:EF:44:10:0E:37:9A:FF:EA:16:DA:C4:D4:F7:36:B2:42:99:AB
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/B3F59B94736111F09ADEE8EBDAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.217.0.0-154.217.4.255
154.217.96.0/19
154.217.160.0/20
154.217.178.0/24
Signature Algorithm: sha256WithRSAEncryption
96:ea:dd:be:8d:25:d6:f1:81:19:bb:64:a1:a7:d1:68:0c:0b:
8c:70:3d:bb:1f:f7:98:10:d0:8f:da:f0:19:ae:38:d5:2b:94:
a5:cd:d3:d5:59:57:ae:de:f7:cb:01:92:ca:bd:03:0a:ae:e6:
6a:67:60:4e:e9:f9:d1:ca:aa:cc:5a:88:6e:34:b8:5e:37:92:
f4:24:f7:6d:3f:3d:9a:2b:e4:ee:6d:0e:b8:dd:34:64:59:7c:
54:29:c2:13:42:64:2a:88:f3:2c:83:95:e8:5c:75:c4:66:d4:
78:42:74:55:86:a6:7a:ea:d2:81:e5:48:da:2d:71:82:f3:ce:
16:14:a7:60:f2:7d:29:63:1e:b8:be:c8:cb:31:e1:b8:c3:8f:
75:44:f6:33:e0:b1:13:61:38:c8:72:ae:68:4f:b6:fb:24:50:
0f:6c:ac:7f:fa:ae:18:ca:de:06:b3:d4:71:57:1c:42:1c:69:
91:2f:bb:2e:29:18:98:da:e5:7f:15:61:82:cc:a3:4f:c9:2f:
77:d7:d5:87:b5:66:42:a8:5b:6d:55:11:dc:41:d8:a1:d8:61:
d8:13:6e:6a:be:4e:b3:77:f3:a7:3f:63:6e:da:21:7b:a9:96:
3e:98:e5:5a:25:d3:fd:70:48:7a:bf:e9:8e:fb:8f:a8:ae:62:
38:58:51:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 13:42:43 2025 by rpki-client